SIGACT News Logic Column 15 

Riccardo Pucella 
Northeastern University 
Boston, MA 02115 USA 
riccardo@ccs.neu.edu 



Some comments about the last Logic Column, on nominal logic. Pierre Lescanne points out 
that the terminology "de Bruijn levels" was introduced in the paper Explicit Substitutions with 
de Bruijn's Levels, by Pierre Lescanne and Jocelyne Rouyer-Degli, presented at the 1995 RTA 
conference. He also points out that Stoy diagrams were probably invented by Stoy, but appear in 
work by Bourbaki as early as 1939 (published in 1954). Merci, Pierre. 

That article also initiated what is bound to be an interesting discussion. The critique of higher- 
order abstract syntax in that article prompted Karl Crary and Robert Harper to prepare a response 
to the leveled criticisms. The response should appear in an upcoming Column. 

In this issue, Alexander Kurz describes recent work on the topic of specifying properties of 
transition systems. It turns out that by giving a suitably abstract description of transition systems 
as coalgebras, we can derive logics for capturing properties of these transition systems in a rather 
elegant way. I will let you read the details below. 

I am always looking for contributions. If you have any suggestion concerning the content of the 
Logic Column, or if you would like to contribute by writing a column yourself, feel free to get in 
touch with me. 



Coalgebras and Their Logics 1 

Alexander Kurz 
University of Leicester, UK 



1 Introduction 

Transition systems pervade much of computer science. This article outlines the beginnings of 
a general theory of specification languages for transition systems. More specifically, transition 
systems are generalised to coalgebras. Specification languages together with their proof systems, 
in the following called (logical or modal) calculi, are presented by the associated classes of algebras 
(e.g., classical propositional logic by Boolean algebras). Stone duality will be used to relate the 

1 © Alexander Kurz, 2006. 
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logics and their coalgebraic semantics. The relationship between these notions can be summarised 



as 



systems • 



logic ■ 



■ coalgebras 

Stone duality 

jbras 



(1) 



alge 




Let us have a closer look at the role of Stone duality, which relates the class A of algebras of a 
propositional logic to the class X representing the carriers of the transition systems (i.e., coalgebras). 
The duality is provided by two operations P and S 



(2) 



where P maps a carrier X to its propositional theory and S maps an algebra A to its 'canonical 
model' {PX and SA are also called the dual of X and A, respectively; the reason for the terminology 
will become clear later). The situation in Diagram|2]describes a perfect match of logic and semantics 
if both models and theories can be reconstructed (up to isomorphism) from their dual, formally, if 
X ^ SPX and A 9* PSA for all X e X and A £ A. 

As we will explain below, the type of a class of coalgebras is an operation T : X — > X . This suggests 
that, in the same way as a logic for X is given by the algebras in A, a logic for T-coalgebras is 
given by the algebras for the corresponding operation L on A. The Stone duality (J2J) then lifts to 
L-algebras and T-coalgebras 

Coalg(T) ~~>lg(L) 



(3) 



< 



S 
P 



X . 



y 



The logical interpretation of the upper duality is that the logic corresponding to Alg(L) is (strongly) 
complete and characterises bisimilarity wrt the transition system Coalg(T). This will be explained 
in Section EJ Section |2] discusses one example of the dualities in Diagram [21 in detail and briefly 
sketches the more general picture. The remainder of the introduction is devoted to a more detailed 
exposition of the ideas above. Section 0] summarises what can be gained from this approach and 
outlines some research directions. Definitions of the few notions from category theory we need are 
collected in an appendix. 



1.1 Systems as Coalgebras 

In its simplest form, a transition system consists of a set X and a relation R C X x X. Denoting 
by V the operation mapping a set to its powerset, a transition system can equivalently be described 
by a map 

X VX 

where £(x) = {y\xRy} is the set of successors of x. The structure (X, £) is a V-coalgebra. 

This description of transition systems is very flexible. Table ^gi ves some examples of T-coalgebras 
(X, £) for suitable mappings T : Set — > Set. The set C appearing in some functors is a constant 
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TX 


X TX 


1. 


CxX 


streams over C 


2. 


C x X + 1 


finite or infinite lists over C 


3. 


2xl c 


deterministic automaton with input alphabet C 


4. 




C-labelled transition system 


5. 


(1+DI) C 


probabilistic transition systems 


6. 


2 2X 


predicate transformer 



Table 1: Examples of Coalgebras 



parameter denoting an input or output alphabet. The models we have in mind are often sys- 
tems with a distinguished initial state (which we also call pointed coalgebras or processes). (1) A 
coalgebra I^CxI with specified initial state xo is a process outputting the infinite stream 
(head(xo), head (tail (xq)), . . .) of elements of C, where head : X — > C and tail : X — > X refer to the 
two components of X — > C x X. (2) Here 1 denotes a one-element set, which allows a process to 
stop; hence, in addition to streams, one now also allows behaviours given by finite lists. (3) The 
2 in 2 x X c denotes a two-element set and the X — > 2 part of the coalgebra expresses whether a 
state is accepting or not; X c denotes the set of functions from C to X and X — > X c calculates 
the successor state from a current state and an input from C. (4) Comparing with (1) and (3), 
V(C x X) suggests to think of the labels in C as outputs and (VX) C of the labels as inputs, but 
both are isomorphic. (5) The distribution functor VX maps X to the set of discrete probability 
distributions. (6) Coalgebras X — > 2 2 are (in bijective correspondence to) predicate transformers 
2 X _> 2 X . 



Bisimilarity The crucial observation that makes the coalgebraic point of view useful is that all 
of these type constructors T are functors and that, therefore, T-coalgebras come equipped with a 
canonical notion of behavioural equivalence or bisimilarity. 

Let us explain this important point in more detail. To say that an operation T : Set — > Set is a 
functor means that T is not only defined on sets but also on functions, mapping / : X — > Y to 
Tf : TX — > TY. Moreover, T is required to preserve identities idx ■ X — > X, and composition, 
T(f o g) = Tf o Tg. This allows us to define a morphism of coalgebras (X, £) — > (1", z/) as a map 
/ : X -> y such that Tfo£ = vof: 



X 



Y 



TX 

Tf 

TY 



(4) 



Coalgebraic bisimilarity, or behavioural equivalence, denoted ~, is now the smallest equivalence 
relation that is invariant under all morphisms: Define ~ to be the smallest equivalence relation 
containing all pairs x ~ f(x) where / ranges over coalgebra morphisms and x over the domain of 
f 2 



This definition is equivalent to the following one. Two states x, y in two coalgebras are bisimilar iff there are two 
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Coming back to our introductory example, V is a functor if we let Vf : VX — > VY map a subset of 
X to its direct image under /. It is now an instructive exercise to show that coalgebraic bisimilarity 
agrees with the standard notion of bisimilarity for (unlabelled) transition systems. For this, one 
shows that a map is a coalgebra morphism iff its graph is a bisimulation between the two transition 
systems. 

In examples of Tabled we have the following. (1,2) Two processes are bisimilar iff their outputs 
are the same. (3) Two states are bisimilar iff they accept the same language. (4) Here coalgebraic 
bisimilarity is the one known from modal logic or process algebra and similarly for (5) and (6). 

Final Coalgebras It is often possible to characterise bisimilarity by a single coalgebra, the 
so-called final coalgebra. Formally, a coalgebra is final if from any other coalgebra there is a unique 
morphism into the final coalgebras. It follows that two states in two coalgebras are bisimilar iff 
they are identified by the unique morphisms into the final coalgebra. In other words, the final 
coalgebra, if it exists, provides a canonical representative for each class of bisimilar states. 

In many cases, apart from characterising bisimilarity, final coalgebras are interesting objects in 
their own right. Recognising these structures as final coalgebras allows to reason about them, 
sometimes to great advantage, using coinduction instead of induction. We will not pursue this 
issue any further here but only mention some examples. In Table ^ the final coalgebra is in (1) 
the coalgebra of streams over C, in (2) the coalgebra of finite and infinite lists over C, in (3) the 
coalgebra of all languages (with successors given by language derivative). In our leading example 
of 'P-coalgebras the final coalgebra is the universe of non-well founded sets. 

1.2 Modal Logic 

Let us now turn to logics for coalgebras. One would want such logics to respect bisimilarity, that is, 
formulae should not distinguish bisimilar states. We call such logics modal because it can be argued 
that invariance under bisimilarity is the main feature of modal logic. For example, a theorem of 
van Benthem states that modal logic is precisely the fragment of first order logic that is invariant 
under bisimilarity. Moreover, either by strengthening the logic allowing for infinite conjunctions 
or be restricting the semantics to finitely branching transition systems, modal logic characterises 
bisimilarity in the sense that for each two non-bisimilar states there is a formula distinguishing 
them. 

Let us first look at the usual modal logic for unlabelled transition systems, ie, P-coalgebras. It 
consists of classical propositional logic extended by one unary operator □. The interpretation of 
□ is that of a restricted universal quantifier, more precisely, Oip holds in state x iff cp holds in all 
successors of x. We write this as 



Having seen a logic for P-coalgebras, can we generalise this to arbitrary functors T? 

Note first that, semantically, a modal operator transforms predicates into predicates. So we could 
say that a modal operator is a suitable operation 




(5) 



2 



,x 



2 



,x 



coalgebra morphisms /, g such that fix) = g(y). 
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where 2 denotes again the set of functions X — > 2, or equivalently, the set of subsets of X. But 
we also want to capture that □ says something about the immediate successors of a state, that is, 
about a single transition step. We therefore identify (one-step) modalities □ for T with so-called 

predicate liftings 3 

O x : 2 X -> 2 TX (6) 
which give the semantics of a modal operator □ wrt a coalgebra (X, £) via 

2 x 2 tx ^JL 2 x (7) 

that is, dropping the subscripts, 

W^^oDN. (8) 

To recover © as a special case of (jHJ), one defines the corresponding predicate lifting as OY = 
{Z C X | Z C Y} for y G 2 x . 

How do we guarantee that modal logics for coalgebras given by predicate liftings are invariant 
under bisimilarity? Simply by requiring that predicate liftings Ox : 2 X — > are natural trans- 
formations. Spelling out the definition of a natural transformation this means that in the following 
diagram the right-hand square commutes (for all / : X — > Y) 

2 X (9) 
V 1 
2 Y 

If, moreover, / : (X, £) — > (1", z/) is a coalgebra morphism, then also the left-hand square commutes 
and, therefore, the outer rectangle as well. The proof of invariance of the logic under bisimilarity 
(p.EJ) is now a routine induction on the structure of the formulae, where the case of modal operators 
□ is taken care of by Diagram © . 




TX 



D , 



TY 



a, 



1.3 Logics as Algebras 

After having explained the basic notions of coalgebras and their logics, in the remainder of the 
article, I will sketch a deeper analysis of the situation. It is based on the insight that logics for 
coalgebras are in fact algebras and, moreover, that a logic perfectly captures the coalgebras if the 
algebras and coalgebras are related by Stone duality. 

Observe that the modal logics discussed above come in two stages. First, for any coalgebra (X, £) we 
have the Boolean algebra 2 X , which corresponds to propositional logic. This logic is then extended 
by modal operators 2 X — > 2 X . Traditionally, these algebras, called Boolean algebras with operators 
or modal algebras, are thought of as given by a carrier A plus boolean operators JL, ->,A, V plus 
(possibly more than one) modal operator □. For example, the modal logic for P-coalgebras can be 
given by one unary modal operator □ that preserves top (true) and conjunction 

□ T = T □(aA6) = DoAD6 (10) 

This example shows clearly the relationship between algebras and modal calculi. On the one hand, 
1)10(1 is the equational definition of the class of modal algebras. On the other hand, ()10() plus 

3 'Predicate lifting' because D lifts a predicate on X to a predicate on TX. 
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equational logic provides a calculus for modal logic. Since modal logics are more commonly given 
by Hilbert calculi, we indicate briefly that both calculi are equivalent in a rather straightforward 
way. 

The usual Hilbert calculus of the modal logic for "P-coalgebras, denoted K, has as axioms all 
propositional tautologies and 0(p —><?)—> (Op — ► rules are modus ponens, substitution, and 
necessitation 'from <p derive □</?'. To compare K with the equational calculus given by 1)10(1 . we 
write h"K ¥> an d I - el = ip for formulae derivable in K and equations derivable in equational logic. 
One then shows that hjc V 9 ^ I - el ^ = T and I— el <p = V 7 ^ l~K V 3 ^ V*- F° r example, the 
necessitation rule is simulated on the equational side by the congruence rule of equational logic and 
the first of the axioms p0|). 

Up to now we have only seen standard material from modal logic. It will now be shown that modal 
algebras are algebras for a functor. Since algebras for a functor are, in a precise sense, dual to 
coalgebras this will allow us to relate modal algebras (and hence modal calculi) in a uniform way 
to their coalgebraic semantics. 

We start by observing that the two-stage process of building a modal algebra can be made more 
explicit by saying that a modal algebra is a Boolean algebra A with a finite-meet preserving map 
□ : A A. From a technical point of view, it is inconvenient that A is a Boolean algebra but □ 
is only a meet-semi-lattice morphism, which does not preserve all of the Boolean structure. This 
is easily rectified: Modal algebras are in one-to-one correspondence to algebras for the functor L 
where 

LA is the free Boolean algebra over A considered as a meet-semi-lattice. (11) 

This means that LA is determined by the property that for each finite-meet preserving function 
A — 1 B there is a unique Boolean algebra morphism LA — > B such that 

LA ^B (12) 




A 



commutes. It follows that Boolean algebra morphisms LA — > A are in one-to-one correspondence 
with semi-lattice morphisms A A. 

LA — > A is an algebra for the functor L. This notion of an algebra for a functor dualises the notion 
of a coalgebra, the arrows going in opposite directions: into the carrier for algebras and out of the 
carrier for coalgebras (the appendix gives a more formal statement of this duality) . 

Let us summarise the relationship between logics and algebras in our example. Boolean algebras 
correspond to classical propositional logic. A functor L specifies an extension of propositional logic 
with modal operators. The algebras for this modal logic are the algebras for the functor L. 



class BA of Boolean algebras 


classical propositional logic 


functor L : BA -> BA 


modal operators + axioms 


class Alg(L) of modal algebras 


modal logic 
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1.4 Relating Algebras and Coalgebras via Stone Duality 

We have explained so far the two horizontal lines of the picture (^Q), namely systems as coalgebras 
and logics as algebras. We now come to Stone duality, relating the two. 

We start by remarking that unitary modal logic does not describe "P-coalgebras perfectly in the 
following sense. First, finitary logics cannot characterise bisimilarity, that is, they are not strong 
enough to distinguish all non-bisimilar states. Furthermore, there are consistent modal logics that 
are incomplete in the sense that there are no P-coalgebras satisfying them. 4 There are two ways 
to rectify this mismatch. 

The first is based on the observation that 2 X is not only a Boolean algebra but also has infinitary 
intersections, or algebraically speaking, 2 X is a complete atomic Boolean algebra. This suggests 
that a perfect description of transition system requires infinitary propositional logic. This is well- 
known in process algebra: For infinitely branching transition systems Hennessy-Milner logic only 
characterises bisimilarity if one allows infinite conjunctions. 

Alternatively, instead of strengthening the logic by infinitary constructs, one can modify the se- 
mantics to take the weaker expressivity of the logic into account: One equips transition systems 
with a notion of 'admissible' or 'observable' predicate. For this, one usually lets carriers consist 
not of sets but topological spaces (X, OX). The topology OX is a subset of 2 X encoding which 
predicates on X can be expressed by the logic. 5 

In the first case, the algebras in Diagram [21 are complete atomic Boolean algebras, so Diagram [51 
becomes 

p 

Set CABA . 

S 

where PX = 2 X and S maps an algebra to its set of atoms. 6 

In the second case, the algebras are Boolean algebras. The corresponding spaces are known as 
Stone spaces and Diagram [21 becomes 

p 

Stone ~ BA . 

s 

Both diagrams are dual equivalences, so from an abstract point of view they share exactly the same 
(or rather dual) properties. But the categories on the right-hand side are categories of algebras 
that come with an equational logic. Lifting such a basic duality to a duality of coalgebras and 
modal algebras, as indicated in Diagram [31 will provide modal logics for coalgebras. 

1.5 Notes 

References to Stone duality will be given in the next section. The standard reference for systems 
and coalgebras is Rutten [HJ. The duality of algebras/coalgebras and induction/coinduction are 

4 This phenomenon appears if the proposition letters of the modal axioms are interpreted as ranging over all 
subsets of the carrier of the model (Kripke frame semantics) . It does not happen if proposition letters receive a fixed 
interpretation (Kripke model semantics). 

5 For example, consider the modal logic K and a "P-coalgebra that is a tree with initial state Xo having branches of 
any bounded length and one infinite branch. The subset of states reachable in bounded branches is not admissible. 
This corresponds to the fact that having an infinite branch is not expressible in the finitary logic K. 

6 a is an atom if _L < a and _L < b < a => b — a. 
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explained in detail in the tutorial by Jacobs and Rutten [52]. Further introductions are provided 
by the course notes of Gumm [27] . Pattinson [22], and Kurz [32] and the forthcoming book by 
Jacobs |2S1. 

Coalgebras Motivated by Milner's CCS (4 in Table^), Aczel [Sj introduced the idea of coalgebras 
for a functor T as a generalisation of transition systems. He also made three crucial observations: 
(1) coalgebras come with a canonical notion of bisimilarity; (2) this notion generalises the notion 
from computer science and modal logic; (3) any 'domain equation' X = TX has a canonical solution 
(in sets or classes), namely the final coalgebra, which is fully abstract wrt behavioural equivalence. 

This idea of a type of dynamic systems being represented by a functor T and an individual system 
being an T-coalgebra, led Rutten [BTJ to the theory of universal coalgebra which, parameterised by 
T, applies in a uniform way to a large class of different types of systems. In particular, final seman- 
tics and the associated proof principle of coinduction (which are dual to initial algebra semantics 
and induction) find their natural place here. 

The following references provide details on the examples in Tabled Stream coalgebras have been 
studied by Rutten in a number of papers, see e.g. [HE]- For the example of deterministic automata 
as coalgebras see Rutten (HD] • Probabilistic transition system as coalgebras go back to Rutten and 
de Vink j2JJ. Coalgebras for the double contravariant powerset functor are investigated in Kupke 
and Hansen [2%] . 

The idea of systems as coalgebras and the paradigm of final semantics — together with its associated 
principles of coinduction — has been applied to such different topics as, for example, automata theory 
[SO] , combinatorics control theory [32], denotational semantics of 7r-calculus (231 IMj- process 
calculi and GSOS-formats [Ml El EZ1 > probabilistic transition systems [OlEilO^, component-based 
software development 13 [7j , and the solution of recursive program schemes |3jJ] • Modelling classes 
in object-oriented programming as coalgebras [57] I3f)j led to new verification tools (LOOP-Tool 
[70] . CCSL (2Hj, CoCasl [221) which also incorporate reasoning with modal logics based on the 
research on coalgebras and modal logic described below. 

Coalgebras and Modal Logic For background on modal logic the reader is referred to Blackburn, 
de Rijke, Venema ^U] (Thm 2.68 shows that modal logic is the bisimulation invariant fragment 
of first-order logic, Chapter 5 is on modal algebras, Thm 4.49 gives an example of an incomplete 
modal logic). Further material can be found in Venema [72]. Modal algebras as algebras for a 
functor and their duality to coalgebras for a functor was first presented in Abramsky pQ. 

Research into coalgebras and modal logic started with Moss |S0J - The logic of [201 1S uniform 7 in 
the functor T, but it does not provide the linguistic means to decompose the structure of T which is 
needed to allow for a flexible specification language. To address this issue, [37J ESJ (independently) 
proposed to restrict attention to specific classes of functors and presented a suitable, but ad hoc, 
modal logic. This work was generalised by Jacobs [31] . Pattinson showed that these languages with 
their ad hoc modalities arise from modal operators given by predicate liftings. He gives conditions 
under which logics given by predicate liftings are sound and complete |2I] and expressive [56] . 
Schroder [S3] and Klin [3B] show that for any finitary functor T on Set there is a modal logic given 
by predicate liftings that characterises bisimilarity. 

From a semantical point of view, modal logic can be considered as dual to equational logic |45[ 
144] . [48] goes further and shows that coalgebras can be specified — in the same (or dual) way as 
algebras — by operations and equations; moreover, the dual of the algebraic operations turn out to 

7 The restrictions are that T is on Set and has to preserve weak pullbacks. 
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be bisimilarity preserving predicate transformers, that is, modal formulae. The results following 
from this approach work for all functors but the logics need to be strong enough to express all 
possible behaviours. This needs, in general, infinite conjunctions in the logics. To study finitary 
logics, Jacobs (SJ covers some ground towards a duality for coalgebras/generalised BAOs and 
Goldblatt |2B] develops a notion of ultrapower for coalgebras. Both approaches are restricted again 
to specific classes of functors. In this paper we argue that, based on Stone duality, it is possible to 
develop a uniform account. 

2 Stone Duality 

We will treat Stone duality for Boolean algebras as an illustrative example and then remark on 
how it generalises to other cases. 

2.1 The Representation Theorem for Boolean Algebras 

The axioms of a Boolean algebra relating _!_,->, A, V are the abstract essence of the set-theoretic 
operations of empty set, complement, intersection and union. But how can one show that the axioms 
of Boolean algebra are indeed complete? We have to exhibit, for each non-derivable equation, an 
algebra of subsets violating that equation. 

Suppose <p = ip is not derivable from the axioms of Boolean algebra. By completeness of equational 
logic, there is a Boolean algebra A such that A \f= (p = ip. To conclude that there is a Boolean 
algebra of subsets (a field of sets) that refutes <p = ip it is enough to find a set SA and an injective 
Boolean algebra morphism 

A -» PSA 

where P denotes here the operation mapping a set to the Boolean algebra of its subsets. Indeed, if 
A y= (p = ip, then by injectivity PSA \f= <p = ip, yielding a counterexample for ip = ip in an algebra 
where all the Boolean operations are interpreted by their set-theoretic counterparts. 

How does one get the points of the space SA? Similarly to defining real numbers as certain 
collections of intervals, a point will be a certain collection of elements of A, or, equivalently, a 
function A — > 2. Which of these functions should be points? Observing that 2 is not only a set, 
but also a Boolean algebra 2, we define SA = BA(A, 2) where the notation BA(A, B) denotes the 
set of Boolean algebra morphisms A — > B. Detailing the definition of an algebra morphism, it is 
straightforward to verify that the requirement that p : A — > 2 be an algebra morphism says that p 
is a maximal and consistent collection of elements of A. With the canonical map A — » PSA, we 
can now state Stone's representation theorem for Boolean algebras. Note that with the definition 
below, the statement that a point p satisfies the predicate a expresses itself as p £ a. 

Theorem 2.1. The map 

(•) : A — ► PSA (13) 
a i-> a = {p G SA \ p(a) = 1} (14) 

is an injective Boolean algebra morphism. 
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2.2 Stone Duality for Boolean Algebras 

The representation theorem works by associating a space to an algebra (via S) and then, vice versa, 
an algebra to a space (via P). What precisely are the spaces that correspond to algebras? 

In a first instance, we can say that a space (X, A) consists of a set X and a Boolean algebra of 
subsets A C 2 X such that (1) any two different points in X are separated by elements of A and (2) 
(X, A) is compact, that is, every collection C of elements of A with the finite intersection property 8 
has non-empty intersection. The two properties capture that the points of the space are determined 
by the algebra in the following sense. (1) says that there are not more points than can be separated 
by predicates and (2) that there are enough points to realise every consistent collection of predicates 
from A. 

Further, one notices that a space (X, A) can be considered as the topological space (X, OX) with 
OX being the topology generated by A, that is, the closure of A under arbitrary unions. One 
recovers the Boolean algebra A from OX as the collection of all compact opens. Since in a compact 
Hausdorff space a subset is compact iff it is closed, one can replace compact open by clopen (which 
is brief for closed and open). To summarise: 

Definition 2.2. A Stone space is a topological space that (1) is To, (2) compact, and (3) the 
clopens are a basis for the topology. 

Stone spaces with continuous maps form the category Stone. From the representation theorem and 
the definition of Stone we obtain two operations S and P 

p 

Stone ~ t BA 

where SA is the topological space with points BA.(A, 2) and the topology generated by {a \ a € A} 
as in (|14|): PX = Stone(X, 2) is now the Boolean algebra of clopens (instead of the full powerset). 
We speak of a duality here because both operations are functors that act on morphism by reversing 
the arrows, namely, mapping a morphism / to inverse image / . Moreover, Stone and BA are 
dually equivalent, that is we have isomorphisms 

A = PSA (15) 
X SPX (16) 

(fTB|) is injective because X is To and surjective because X is compact. (fT5|) is surjective by con- 
struction and injective by the Representation Theorem 12.11 To summarise: 

Theorem 2.3. The categories BA and Stone are dually equivalent. 

From our presentation, one could get the impression that topologies come in here accidentally 
and the logical content of the duality is completely contained in the representation theorem. I 
would reply the following. First, Stone spaces arise here from logical considerations but they are 
of independent interest. A well-known example is the Cantor middle-third space. In fact, all 
complete ultrametric spaces are Stone spaces. Second, the dual equivalence is nice to have; for 
example, we then have that the dual of an initial algebra is the final coalgebra; this will be used in 
the next section to show that that modal logics characterise bisimilarity. Third, topologies often 
have an interesting computational perspective arising from the idea that observable properties are 
closed under arbitrary unions but not intersections [65U731 12*2] . Finally, the topological perspective 
suggests and unifies many generalisations, some of which we briefly review now. 
8 C has the finite-intersection property if all finite subset of C have non-empty intersection. 
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2.3 A Sketch of the General Picture 



The variations of Stone duality relevant for the present purposes fit the following picture. We start 
with a class A of distributive lattices and X of topological spaces (assumed to be T ). Think of 
algebras A € A as propositional theories and of spaces X € X as models of propositional theories 
with the opens (or compact opens for finitary logics) interpreting the propositions. There is an 
operation P : X — > A, mapping a space to its algebra of predicates. And an operation S : A — > X 
mapping an algebra to its 'canonical model'. 

p 

X^Z^A. (17) 

s 

Moreover, in the examples of the table below, PX = X(X, 2) and SA = ^4(^4,2) where 2 denotes 
the appropriate two-element topological space or two-element algebra. We speak of a duality, since 
P and S work contravariantly on morphisms, mapping a morphism (that is, algebra morphism or 
continuous map) / to /~ 1 . Moreover, there are morphisms 

QA '■ A — > PSA a x : X -> SPX 

and Q17JI is a dual equivalence if they are bijective. Logically, this means the following. As we have 
explained in Section |2~T1 qa injective means completeness (and it will, in general, be surjective by 
definition of S and P). ax is injective means, together with X being To, that the logic is expressive 
in the sense that different points are separated by some predicate. If ax is not surjective, then 
SPX has points not available in X; thus the logic is not strong enough to make these additional 
points inconsistent. 

We conclude with a table of some relevant examples. 



X 


A 


spaces/algebras 


propositional logic 


Set 


CABA 


sets/complete atomic Boolean algebras 


infinitary classical 


Stone 


BA 


Stone spaces/Boolean algebras 


classical 


Spec 


DL 


spectral spaces/bounded distributive lattices 


negation free 


Poset 


CDL 


posets/complete distributive lattices 


infinitary negation free 


Sob 


Frm 


sober spaces/frames 


geometric 



In the two last examples, qa is injective for free algebras A but not for all algebras. Logically, this 
corresponds to having completeness but not strong completeness. This also happens for proposi- 
tional logic with countable conjunctions. 

2.4 Notes 

Three introductory textbooks on Stone duality are Vickers [73], Davey and Priestley \T3\, Brink 
and Rewitzky |16j . 

Stone duality was introduced by Stone |671 168j . The main reference for Stone duality is Johnstone's 
book on Stone Spaces |33| which also provides detailed historical information. The handbook 
article [I] covers the topic from the point of view of domain theory. Both texts also provide many 
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more examples of Stone dualities. Topological dualities beyond sober spaces, e.g., for completely 
distributive lattices and posets, are treated by Bonsangue et al |11[ I15]. The representation theorem 
for propositional logic with countable conjunctions can be found in Karp For applications of 
complete ultrametric spaces to control flow semantics see de Bakker and de Vink [20] . 



3 Logics of Coalgebras 

The previous section discussed dual equivalences ((T7|) between categories X of topological spaces 
and categories A of distributive lattices. In this section, we extend this picture to T-coalgebras. 
Starting with a diagram as in (|17|) and a functor T on X, we dualise T to a functor L on A. The 
duality of X /A and T/L lifts to a duality of coalgebras and algebras. 



Coalg(T) 



tC X. 



s 
p 



Alg(L) 



(18) 



A 



And in the same way as the duality of X and A describes a logic for X , so the duality of Coalg(T) 
and Alg(L) describes a logic for T-coalgebras. 



3.1 Abstract Logics: Using the Duality 

Given a duality as in (|17j) and a functor T on X, then PTS is the dual of T on A. In fact, we will 
need a bit more liberty and say that L is dual to T if L is isomorphic to PTS. Or, equivalently, L 
is dual to T if there is a natural isomorphism 

5 X : LPX -> PTX (19) 

Using (5 we can associate to a T-coalgebra (X, £ ) its dual L-algebra 

P(X, £) = LPX PTX PX 

and similarly for S. 

In algebraic logic, logics are described by operations and equations, and then properties of a logic 
are studied by investigating the variety of the algebras for the given operations and equations. A 
basic construction is that of the Lindenbaum algebra. Given a logic L, the Lindenbaum algebra 
Al is obtained from quotienting the set of all terms by the smallest congruence derived from the 
equations. Thus, the elements of the Lindenbaum algebra Al can be seen as 'abstract propositions', 
or propositions up to interderivability. Among all algebras in the variety, the Lindenbaum algebra 
is determined by the following property: for any algebra A there is a unique morphism Al — > A, 
that is, Al is the initial algebra. We turn this into a definition. 

Definition 3.1. Denote by Al the initial L-algebra. The elements of Al are called propositions. 
The semantics [</?] °f a proposition ip wrt a coalgebra (X, £) € Coalg(T) is given by the image 
of ip under 

■A-L y P(X, £) 

We write Coalg(T) \= (ip = tp) if for all coalgebras (X, £) the equation (p = ij) is satisfied in P(X, £). 
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We remark that Theorem 13 . 71 will explain precisely in what sense the initial L-algebra is a Linden- 
baum algebra. 



Theorem 3.2. Propositions are invariant under bisimilarity. 

Proof. Recalling the definition of bisimilarity (p.EJ), we have to show, given a coalgebra morphism 
/ : (X,g) -> (X',£') and x £ X, that x G M(x,0 f( x ) G M(X',f')- Tms follows directly from 
the fact that the diagram 



.4 



L 



pf=pf=r 1 



>p(x>,e) 

commutes due to Al being initial. □ 
The essence of completeness wrt to the coalgebraic semantics is: 
Theorem 3.3. Alg(L) |= (<p = rji) 4=> Coalg(T) \=(tp = ij}). 

Proof. ' =4> ' (soundness) is immediate from the definitions. ' <= ' (completeness) works as in 
Theorem Suppose Al y= (p = ip. By injectivity of Al — > PSAl we have PSAl \fc ip = ip. That 
is, the coalgebra SAl does not satisfy ip = if). □ 

We remark that, as apparent from the proof, it is the representation of the initial (or, more generally, 
free algebras) which gives completeness. Since we have a dual equivalence, all algebras can be 
represented and we obtain strong completeness (completeness wrt a set of assumptions). 

Theorem 3.4. The logic characterises bisimilarity. 

Proof. Without loss of generality, let us assume that x, x' are two different elements of the final 
coalgebra SAl- The two points can be distinguished by a proposition since Al — > PSAl is 
surjective and SAl is a To-space. □ 



To summarise, we have seen how to obtain a logic that perfectly describes T-coalgebras: Just 
consider as formulae the elements of the initial L-algebra 9 where L is the dual of T. We called this 
logic abstract since it is not explicitly built from modal operators and axioms. The next subsection 
explains that modal operators and axioms are presentations of the functor L. 



3.2 Concrete Logics: Presenting Algebras and Functors 

Ultimately, we are interested in relating logical calculi to transition systems. We have motivated 
to consider transition systems as coalgebras and used Stone duality to dualise coalgebras to alge- 
bras. The particular benefit obtained from using Stone duality is that the algebras thus obtained 
correspond to logical calculi. Let us take a closer look again at the guiding ideas, which have been: 

9 If T : Set — > Set is powerset, then the initial L-algebra does not exist for reasons of size. But one can still define 
a class of formulae using the initial algebra sequence of L. We ignore this slight complication for the purposes of 
exposition. 
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category of algebras A 


propositional logic 


algebra A in A 


propositional theory 


functor L : A — > A 


operations and equations for T-coalgebras 


category Alg(L) 


modal logic for T-coalgebras 



These correspondences are justified as follows. The categories A obtained from Stone duality can 
be presented by a signature £ of operations and equations E in the sense that A is (isomorphic to) 
the class Alg(£,.E) of algebras for the signature £ satisfying E. The presentation (E,E) gives a 
logical calculus, via equational logic. An algebra A £ A has a presentation (G, R) by generators and 
relations if A is isomorphic to the quotient of the free algebra over G by the smallest congruence 
containing R. In our context, this means that A is the propositional theory given by variables G 
and additional axioms R, see the example below. 

Presenting functors We emphasised above the point of view that a propositional logic is a 
presentation of a category of algebras. Similarly, it is a presentation of L that gives rise to the 
modal operators and its axioms. 

Example. The functor L : BA — > BA for "P-coalgebras from (|lip is presented by the unary operator 
□ and the equations IjlOJI in the following sense. For each A G BA, the algebra LA is presented by 
generators {a a \ a G A} and by relations {(DT, T)} U {(n(a A 6), Da A □&) | a, b G A}. 

It is not a coincidence that the equations in this example are of a special format: Roughly speaking, 
they do not allow nesting of modal operators. Such terms are called terms of rank 1: 

Definition 3.5. Assume A = A\g(E,E) and a signature £' (with operation symbols disjoint from 
£). A term in E + E' is of rank 1 (wrt £') if it is of the form t(Dj(sy)) where t is an n-ary term in 
E and the < i < n, are m^-ary operations in £' and the Sy, < j < m; are terms in E. An 
equation £ = s is of rank 1 if both terms are. 

In our example, the equations (|10[) are of rank 1. In particular: T is a term of rank 1, because T is 
a 0-ary term in the signature E of Boolean algebras; D(o A 6) is a term of the form t(d(s)) where 
t is a variable and s is a A b. Terms like Da — > a and Da — > DDa are not of rank 1. We can now 
define what it means to present a functor by operations and equations. 

Definition 3.6. Assume A = Alg(E^, Ej), a signature El and a set of equations El that are of 
rank 1 (wrt El). (El, El) is a presentation of L : A — ► A if the algebras L^4 are presented by 
(Ga,Ra) where Ga = | <7 G Ei,aj G A} and Ra consists of all substitution instances of 

equations in Ej± U El obtained by replacing variables with elements from A. 

Generalising the example above, it now follows that logics given by predicate liftings correspond to 
functors L : BA — > BA. Indeed, if E is a collection of predicate liftings (with arities possibly > 1), 
then (E,0) presents some functor L. Moreover, it is not hard to see that the two semantics of the 
modal operators given by (JB|) and Definition 13.11 coincide. This also means that, conversely, any 
presentation of a functor corresponds to a collection of predicate liftings (given by El) plus some 
additional axioms. 

The next theorem links the abstract logics from the previous section with concrete logical calculi. 
In particular, it shows that the Lindenbaum algebra of the logic given by operations £,4 + El and 
equations E_a + El is the initial L-algebra. The proof that every L-algebra satisfies the equations 
El requires the restriction to rank 1. 
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Theorem 3.7. Assume A = A\g(Ti A , E A ) and L : A — > A. If L has a presentation {Y,l,El) then 
Mg(L)^A\g(X A + Z L ,E A + E L ). " 

The theorem can be read in two directions. First, starting with T, we find a presentation for L and 
obtain completeness results for modal calculi. Of course, finding a good such presentation for a 
functor is usually not straightforward. It is therefore of interest to know whether arbitrary functors 
L do have a presentation. This question has recently received a positive answer for unitary functors 
on Boolean algebras and sifted colimits preserving functors on arbitrary varieties. I expect that 
these results can be extended to show that modal calculi exist for all functors T on Set and related 
categories. 

Second, one can take a logical calculus and study the corresponding presented functor. For example, 
the infinitary version of the modal calculus K presents the dual L : CABA — ► CABA of V : Set — + Set. 
We obtain the theorem mentioned in the introduction that infinitary modal logic characterises 
bisimilarity. Moreover, we also get a strong completeness result for the infinitary version of the 
modal calculus K. For K itself we obtain the corresponding results for the powerspace (also known 
as Plotkin power domain or hyperspace) on Stone. Similarly, any modal logic of rank 1 is expressive 
and strongly complete for some functor of Stone spaces (also this may not be intended semantics). 
This methodology can be applied to all functors in Table^as presentations of their duals are known, 
with the possible exception of the functors for probabilistic transition systems which deserve some 
further attention. 

3.3 Notes 

The application of Stone duality to modal logic goes back to Jonsson and Tarski [341 I35| and then 
Goldblatt [2^]. The idea of relating type constructors on algebras (see the L above) and topological 
spaces (see the T above) is from Abramsky's Domain Theory in Logical Form [5J Compared to 
[HI E] j the models we are interested in are not only solutions to recursive domain equations (final 
coalgebras) but any coalgebras; moreover, their base category need not be a domain but can be a 
more general topological space. Compared to we use the duality of algebras and coalgebras 
to lift the Stone duality from Boolean logic to modal logic. Our functors L (or their presentations) 
are closely related to Cirstea's language and proof system constructors [T7] . 

42 studies coalgebras over Stone spaces to show that they capture the descriptive general frames 
from modal logic and to present a different view on Jacobs many-sorted coalgebraic modal logic jHJ ; 

53 applies this approach to give a coalgebraic analysis of positive modal logic; |12] proposes to 
study logics for coalgebras via the dual functor and shows that powerspace can be treated in a 
uniform way for different categories of topological spaces; Jl] introduces the notion of a functor 
presented by operations and equations; 40_ shows that logics given by predicate liftings can be 
described by functors L : BA — > BA; studies the relationship between Stone-coalgebras and 
Set-coalgebras. 

4 Outlook 

The aim of this exposition was to give a principled explanation of coalgebras and their logics. It 
cannot be denied that it took us some work in Section [2 to set up the necessary machinery. On the 
other hand, we got paid back with short and easy proofs of Theorems 13.31 and 13.41 Notice that these 
proofs of completeness and expressiveness do not involve any syntax. The interface between syntax 
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and semantics, so to speak, is provided by the notion of a presentation of a functor. This provides 
an interesting way to reason about different modal logics in a uniform and syntax independent way. 

One of the benefits of setting up the theory of coalgebras and their logics in a way uniform in 
the functor is compositionality. For example, given presentations for L\ and L2, one obtains a 
presentation of the composition L\Li- This allows us to not only build new types of coalgebras 
from old ones, but to do the same for their associated logics (as done already in Abramsky 3 ). 
The power of this approach is exemplified by 13 a which derives a logic for 7r-calculus: Using known 
results and compositionality, a presentation for the functor of 7r-calculus is not difficult to find and 
we can then apply the general results. 

Let us conclude with some further topics. 

The modal logic of a functor Our original question has been the following. If universal 
coalgebra is a general theory of systems as proposed by Rutten jSJ, then what are the logics for 
coalgebras? More specifically, can the theory of logics for T-coalgebras be developed uniformly in 
the functor T? The insight alone that, semantically, modal logic is dual to equational logic 44 
does not give a handle on relating coalgebras and their modal calculi. As shown here, this is where 
Stone duality comes in. The solution to the original problem of associating a logic to a functor 
T now looks in close reach: It will be shown that, under appropriate conditions, the dual of a 
functor T has a presentation, which then provides a strongly complete modal logic characterising 
bisimilarity. This should also allow to generalise Moss's original work |5U| and provide his logic 
with a complete calculus. 

Relating different Stone dualities Topology-based models arise either, as in this article, to 
capture the expressivity of logics weaker than infinitary classical logic, or in situations, as in domain 
theory, where a natural notion of observable predicate is given. In both cases, it would be interesting 
to be able to treat the topology as a parameter. This would allow us to compare similar models 
based on different categories of spaces and to study logics which involve two different Stone dualities, 
e.g., the ones for BA and Set. Ongoing work is based on the idea to consider both dualities as arising 
from different completions of one and the same simpler duality. 

Logics with name binding The work on the logic of 7r-calculus [13; suggests that also other 
logics with name binding and quantifiers can be usefully treated in the presented framework. This 
needs still to be worked out. 

Coalgebraic modal model theory In order to better appreciate the relationship between modal 
logic and coalgebras, it would be good to understand in how far known results in modal logic can be 
extended to coalgebras. Some work in this direction has been done on the Jonsson-Tarski-theorem 
and ultrafilter extensions [JI] . There are also new questions brought to modal logic from coalgebra, 
for example, how to best deal with infinite parameters C in Tabled see Friggens and Goldblatt |24j . 

Going beyond rank 1 The original motivation in using Stone dualities was to understand logics 
of coalgebras for a functor T. We have seen that a logic for T only needs axioms of rank 1. From 
this point of view, rank 1 is no restriction. And, of course, we can deal with axioms of rank > 1 
in a trivial way: axioms of rank 1 determine a functor T and hence a category Coalg(T), whereas 
the other axioms specify a subcategory of Coalg(T). So the question really is whether axioms not 
of rank 1 can be treated in a uniform coalgebraic way. 

Fixed-point logic It is straightforward to extend a basic logic derived from T by fixed-points as 
in /x-calculus. But it is not clear at all whether a Stone duality based approach can help in better 
understanding fixed-point logics. Venema [JJ and Kupke and Venema 0Hj introduce the notion 
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of coalgebraic fixed point logic and show that ^-calculus interpreted over different data structures 
such as words and trees can be treated uniformly in a coalgebraic framework. 

A Some Notions of Category Theory 

A category C consists of a class of objects and has, for any two objects A, B, a set C(A, B) of arrows 
(or morphisms) from A to B. Furthermore, arrows / : A — > B,g : B — > C have a composition 
g o f and for each object A there is an identity arrow id^- Examples: The category Set with sets 
as objects and functions as arrows; BA with Boolean algebras and their homomorphisms; further, 
Coalg(T) and Alg(L). 

An isomorphism is an arrow / : A — > B for which there is a g : B — > A with fog = id#,go / = id^. 

A covariant functor between two categories F : C — > T> maps objects to objects and arrows 
/ : A — > B to Ff : FA — ► FB, preserving identities and composition. Examples: the functors T 
and L. 

For each category C we have the dual category C op obtained from reversing the arrows. Example: 
Each functor F : C — > C gives rise to a functor F op : C op — > C op ; the duality of algebras and 
coalgebras can now be stated as Alg(F op ) = Coalg(F) op . 

A contravariant functor F : C — > T> is a covariant functor C op — > T> or, equivalently, C — > D op , 
that is, it reverses the direction of the arrows. Example: 2~ : Set — > BA maps / : A — ► Y to 
2/ = /- 1 : 2 y -> 2 X . 

Given functors i 7 , G : C — > 
^4 in C, such that for all / 

Given two functors -F : C 
natural isomorphisms tq 
and T> are equivalent. 
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